Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add instructions/jan3dev/agentic-aqua/agents-mdgit clone --depth 1 https://github.com/jan3dev/agentic-aquaWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.03283 | $0.03283 |
| Opus 5 | $0.01641 | $0.01641 |
| Sonnet 5 | $0.00657 | $0.00657 |
| Haiku 4.5 | $0.00328 | $0.00328 |
Grade A, and why
agentic-aqua AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured yesterday.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 227 lines — stays where its author put it; the contents beside it link to each section on GitHub.
agentic-aqua
MCP server for managing Liquid Network and Bitcoin wallets through AI assistants (part of AQUA). Liquid via LWK (Blockstream); Bitcoin via BDK. One BIP39 mnemonic backs both networks (unified wallet).
Architecture
AI Assistant ──MCP──▶ aqua.server ──▶ tools.py ──▶ wallet.py (LWK ─ Electrum/Esplora)
└─▶ bitcoin.py (BDK ─ Esplora)
└─▶ lightning.py / sideshift /
changelly / wapupay (third-party clients)
No local node. Liquid: Blockstream Electrum/Esplora. Bitcoin: Esplora only.
Layout
| Path | What lives there | Read its AGENTS.md |
|---|---|---|
src/aqua/ |
Python package: server, tools, wallets, swap clients | src/aqua/AGENTS.md |
src/aqua/cli/ |
aqua Click CLI (mirrors MCP tool surface) |
src/aqua/cli/AGENTS.md |
tests/ |
pytest suite, fixtures, mock patterns | tests/AGENTS.md |
scripts/ |
One-off dev/release helpers (incl. bump_beta.py) |
— |
docs/ |
Release & config guides — PUBLISHING.md (release/CI flow), CONFIG.md |
— |
dist/ |
Build artifacts (do not edit) | — |
Entry points
aqua.server:main— MCP stdio server (registered asaqua-mcpandagentic-aqua).aqua.cli.main:cli— Click CLI registered asaqua.
Dev commands
uv sync --all-extras # install dev deps
uv run python -m pytest tests/ # run full suite
uv run python -m pytest tests/test_x.py # single file
uv run ruff check src tests # lint
uv run python -m aqua.server # run MCP server locally (stdio)
uv run aqua --help # CLI surface
Python ≥ 3.13, package manager uv only (never pip/venv directly).
Code invariants (must hold across the codebase)
- Amounts are integer satoshis end-to-end. Decimal strings appear only on third-party wires (SideShift, Changelly). Convert at the boundary; never propagate floats inward.
- One mnemonic → two wallets. BTC derivation
m/84'/0'/0', Liquidm/84'/1776'/0'+ SLIP-77 master blinding key. Descriptors are NOT inter-derivable; watch-only setups need both. - TXIDs are returned big-endian (display format). BDK uses little-endian internally; flip
at the boundary in
bitcoin.py. - At-rest password ≠ BIP39 passphrase. Encrypts the mnemonic file (PBKDF2 480k + Fernet); does NOT change derived keys. Same mnemonic restores in any BIP39 wallet without it.
- No silent fallbacks. If signing, broadcasting, or PSET verification fails, raise
ValueError(or a specific exception). Do not return a fake-success envelope. SeeCLAUDE.md"No lies rules". - File perms.
~/.aqua/is0o700; wallet/swap files0o600(contain secrets or refund keys). - Atomic writes. Wallet/swap files are written via temp file +
os.replace.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- yesterday First seen · 227 lines · 3,283 tokens per session scan A 90c1d6a6b497
agentic-aqua AGENTS.md is an instructions file published in the GitHub repository jan3dev/agentic-aqua (4 stars, last pushed 8d ago), licensed MIT. It adds 3,283 tokens to every session, about $0.0164 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other instructions, from other repositories
polar CLAUDE.md
Instructions for jamaljsr/polar, covering claude.md, about polar, essential commands, development and testing individual files.
polar copilot-instructions.md
Instructions for jamaljsr/polar, covering polar - ai coding assistant instructions, core architecture, network orchestration via docker compose, state management (easy-peasy + redux) and visual designer (react flow chart).
sparkbtcbot CLAUDE.md
Instructions for echennells/sparkbtcbot, covering sparkbtcbot, what this skill does, structure, trigger phrases and dependencies.
SaturnZap copilot-instructions.md
Instructions for lqwdtech/SaturnZap, covering saturnzap — copilot instructions, build & test, architecture, conventions and test patterns.
SaturnZap tests.instructions.md
Use when writing, editing, or debugging SaturnZap tests. Covers fixtures, mocking patterns, CLI runner usage, and live test markers.
lightning-enable-mcp CLAUDE.md
Instructions for refined-element/lightning-enable-mcp, covering claude.md — lightning enable mcp, project overview, bug fix workflow and engineering standards.